The CloudFormation Scanner can locate misconfigurations in EC2, RDS, IAM, ElasticSearch, VPC, Redshift, SNS, and numerous other services.